Core Principles

• Separate from your identity, devices, and routines
• Provide only the minimum data required
• Discard the account after use
• Manage metadata and access patterns

Risk Snapshot

• Expect identity and behavioral linkage
• Treat metadata as exposure
• Avoid account-recovery traps
• Account for service data retention

Prepare Environment

• Boot a clean OS like Tails or Whonix
• Connect through VPN over Tor
• Verify the IP is not your own
• Disable browser sync and extensions

Reach Signup

• Open accounts.google.com/signup
• Log out of every Google account
• Clear cookies and stored data first
• Keep time sync and location off

Create Account

• Pick a name unrelated to you
• Choose a username with no real ties
• Set a strong, unique password
• Store credentials securely offline

Minimize Data

• Skip the phone number entirely
• Use a recovery email you will burn
• Enter a consistent fake birthdate
• Reveal nothing that narrows you down

Harden Settings

• Review every privacy setting
• Disable smart features you skip
• Turn off ad personalization
• Strip unneeded data collection

Verify OpSec

• Send a test mail to another burner
• Confirm delivery exposes no real identity
• Check for leaks before live use
• Burn the account once finished